改进的RBAC模型在信息服务平台上的应用  

APPLICATION OF IMPROVED RBAC MODEL TO INFORMATION SERVICE PLATFORM

作　　者：董永峰[1] 陆军[2] 刘建波[1] 周艳聪[1,3] 顾军华[1] 

机构地区：[1]河北工业大学计算机科学与软件学院,天津300401 [2]石家庄理工职业学院,河北石家庄050228 [3]天津商业大学信息工程学院,天津300134

出　　处：《计算机应用与软件》2012年第5期99-103,共5页Computer Applications and Software

基　　金：天津市应用基础及前沿技术研究计划项目(10JCZDJZ16000)

摘　　要：针对RBAC模型的不足,在研究传统的RBAC基本原理基础上,结合信息服务平台权限众多、用户和角色数目庞大的特点,提出一种改进的RBAC模型。该模型引入了组织结构、用户组的概念,扩展了资源的类型和资源权限授权形式,给出了模型的形式化定义,并将其运用在信息服务平台上。平台已成功与某高校科研管理系统进行了整合,实践表明,改进的RBAC模型不仅简化了权限管理、减少了角色数量,并且提高了系统的安全性和权限管理的灵活性。Targeting at deficiencies of the RBAC model,on the basis of studying conventional RBAC principles,by integrating such characteristics of the information service platform as a great deal of privileges,users and roles,the paper puts forward an improved RBAC model.The model introduces the concepts of organizational structure and user group,expands resource types and resource privilege authorization forms,presents the model＇s formal definition and then applies it to ISP.The platform has been successfully integrated with a university scientific research management system.Practice indicates that the improved RBAC model not only simplifies privilege management and decreases roles,but also improves the system security and privilege management flexibility.

关 键 词：RBAC 访问控制 角色 组织 许可 信息服务平台 

分 类 号：TP302[自动化与计算机技术—计算机系统结构]